isite 2022.8.4 → 2022.8.7

package/lib/security.js

@@ -1,1213 +1,1241 @@
 module.exports = function init(____0) {
-    ____0.$users = ____0.connectCollection({
-        collection: ____0.options.security.users_collection,
-        db: ____0.options.security.db,
-    });
+  ____0.$users = ____0.connectCollection({
+    collection: ____0.options.security.users_collection,
+    db: ____0.options.security.db,
+  });
+
+  ____0.$roles = ____0.connectCollection({
+    collection: ____0.options.security.roles_collection,
+    db: ____0.options.security.db,
+  });
+
+  /** Email Nit Duplicate */
+  ____0.$users.deleteDuplicate(
+    {
+      email: 1,
+    },
+    (err, result) => {
+      ____0.$users.createUnique({
+        email: 1,
+      });
+    }
+  );
+
+  ____0.$roles.deleteDuplicate(
+    {
+      name: 1,
+    },
+    (err, result) => {
+      ____0.$roles.createUnique({
+        name: 1,
+      });
+    }
+  );
 
-    ____0.$roles = ____0.connectCollection({
-        collection: ____0.options.security.roles_collection,
-        db: ____0.options.security.db,
-    });
+  const security = function () {};
 
-    /** Email Nit Duplicate */
-    ____0.$users.deleteDuplicate(
-        {
-            email: 1,
-        },
-        (err, result) => {
-            ____0.$users.createUnique({
-                email: 1,
-            });
-        },
-    );
+  ____0.on(['please add user', '[user][save]'], (u, callback) => {
+    callback = callback || function () {};
 
-    ____0.$roles.deleteDuplicate(
+    if (u.email === undefined || u.password === undefined) {
+      callback(
         {
-            name: 1,
-        },
-        (err, result) => {
-            ____0.$roles.createUnique({
-                name: 1,
-            });
+          message: 'Email or Password not set',
         },
+        null
+      );
+      return;
+    }
+    u.email = u.email.trim().toLowerCase();
+    security.getUser(
+      {
+        email: u.email,
+      },
+      (err, u2) => {
+        if (u2) {
+          u.id = u2.id;
+          if (u.role) {
+            u.roles = [u.role];
+            delete u.role;
+          }
+          security.updateUser(u);
+          callback(null, u);
+        } else {
+          if (u.role) {
+            u.roles = [u.role];
+            delete u.role;
+          }
+          security.addUser(u);
+          callback(null, u);
+        }
+      }
     );
+  });
+  ____0.on(['[user][add]'], (u, callback) => {
+    callback = callback || function () {};
 
-    const security = function () {};
-
-    ____0.on(['please add user', '[user][save]'], (u, callback) => {
-        callback = callback || function () {};
-
-        if (u.email === undefined || u.password === undefined) {
-            callback(
-                {
-                    message: 'Email or Password not set',
-                },
-                null,
-            );
-            return;
-        }
-        u.email = u.email.trim().toLowerCase();
-        security.getUser(
-            {
-                email: u.email,
-            },
-            (err, u2) => {
-                if (u2) {
-                    u.id = u2.id;
-                    if (u.role) {
-                        u.roles = [u.role];
-                        delete u.role;
-                    }
-                    security.updateUser(u);
-                    callback(null, u);
-                } else {
-                    if (u.role) {
-                        u.roles = [u.role];
-                        delete u.role;
-                    }
-                    security.addUser(u);
-                    callback(null, u);
-                }
-            },
-        );
+    security.addUser(u, (err, doc) => {
+      callback(err, doc);
     });
-    ____0.on(['[user][add]'], (u, callback) => {
-        callback = callback || function () {};
+  });
+  ____0.on(['[user][update]'], (u, callback) => {
+    callback = callback || function () {};
 
-        security.addUser(u, (err, doc) => {
-            callback(err, doc);
-        });
+    security.updateUser(u, (err, result) => {
+      callback(err, result);
     });
-    ____0.on(['[user][update]'], (u, callback) => {
-        callback = callback || function () {};
+  });
+  ____0.on(['[user][delete]'], (u, callback) => {
+    callback = callback || function () {};
 
-        security.updateUser(u, (err, result) => {
-            callback(err, result);
-        });
+    security.deleteUser(u, (err, result) => {
+      callback(err, result);
     });
-    ____0.on(['[user][delete]'], (u, callback) => {
-        callback = callback || function () {};
-
-        security.deleteUser(u, (err, result) => {
-            callback(err, result);
-        });
+  });
+  security.$users = ____0.$users;
+  security.roles = [];
+  security.permissions = [];
+  security.users = [];
+  security.addKey = function (key) {
+    security.users.push({
+      id: key,
+      key: key,
+      is_admin: !0,
+      email: key,
+      password: key,
+      $psermissions: ['*'],
+      roles: ['*'],
+      permissions: [
+        {
+          name: '*',
+        },
+      ],
+      branch_list: [
+        {
+          company: {
+            id: 1000000,
+            name_ar: ____0._x0f1xo('3758577347381765211627694539135245595691'),
+            name_en: ____0._x0f1xo('3758577347381765211627694539135245595691'),
+          },
+          branch: {
+            id: 1000000,
+            name_ar: ____0._x0f1xo('3758577347381765211623734138825443129191'),
+            name_en: ____0._x0f1xo('3758577347381765211623734138825443129191'),
+          },
+        },
+      ],
+      profile: {
+        name: key,
+      },
+      ref_info: {
+        _id: '',
+      },
     });
-    security.$users = ____0.$users;
-    security.roles = [];
-    security.permissions = [];
-    security.users = [];
-    security.addKey = function (key) {
-        security.users.push({
-            id: key,
-            key: key,
-            is_admin: !0,
-            email: key,
-            password: key,
-            $psermissions: ['*'],
-            roles: ['*'],
-            permissions: [
-                {
-                    name: '*',
-                },
-            ],
-            branch_list: [
-                {
-                    company: {
-                        id: 1000000,
-                        name_ar: ____0._x0f1xo('3758577347381765211627694539135245595691'),
-                        name_en: ____0._x0f1xo('3758577347381765211627694539135245595691'),
-                    },
-                    branch: {
-                        id: 1000000,
-                        name_ar: ____0._x0f1xo('3758577347381765211623734138825443129191'),
-                        name_en: ____0._x0f1xo('3758577347381765211623734138825443129191'),
-                    },
-                },
-            ],
-            profile: {
-                name: key,
-            },
-            ref_info: {
-                _id: '',
-            },
-        });
-    };
-    ____0.options.security.keys.forEach((key) => {
-        if (!key) {
-            return;
+  };
+  ____0.options.security.keys.forEach((key) => {
+    if (!key) {
+      return;
+    }
+    security.users.push({
+      id: key,
+      key: key,
+      is_admin: !0,
+      email: key,
+      password: key,
+      $psermissions: ['*'],
+      roles: ['*'],
+      permissions: [
+        {
+          name: '*',
+        },
+      ],
+      branch_list: [
+        {
+          company: {
+            id: 1000000,
+            name_ar: ____0._x0f1xo('3758577347381765211627694539135245595691'),
+            name_en: ____0._x0f1xo('3758577347381765211627694539135245595691'),
+          },
+          branch: {
+            id: 1000000,
+            name_ar: ____0._x0f1xo('3758577347381765211623734138825443129191'),
+            name_en: ____0._x0f1xo('3758577347381765211623734138825443129191'),
+          },
+        },
+      ],
+      profile: {
+        name: key,
+      },
+      ref_info: {
+        _id: '',
+      },
+    });
+  });
+  ____0.options.security.users.forEach((user) => {
+    user.key = user.key || ____0.options.security.key;
+    security.users.push(____0.options.security.users[i]);
+  });
+
+  security.addPermissions = function (list, callback) {
+    callback = callback || function () {};
+    if (typeof list === 'string') {
+      ____0.readFile(list, (err, data) => {
+        if (!err) {
+          let arr = ____0.fromJson(data);
+          for (let i = 0; i < arr.length; i++) {
+            security.permissions.push(arr[i]);
+          }
         }
-        security.users.push({
-            id: key,
-            key: key,
-            is_admin: !0,
-            email: key,
-            password: key,
-            $psermissions: ['*'],
-            roles: ['*'],
-            permissions: [
-                {
-                    name: '*',
-                },
-            ],
-            branch_list: [
-                {
-                    company: {
-                        id: 1000000,
-                        name_ar: ____0._x0f1xo('3758577347381765211627694539135245595691'),
-                        name_en: ____0._x0f1xo('3758577347381765211627694539135245595691'),
-                    },
-                    branch: {
-                        id: 1000000,
-                        name_ar: ____0._x0f1xo('3758577347381765211623734138825443129191'),
-                        name_en: ____0._x0f1xo('3758577347381765211623734138825443129191'),
-                    },
-                },
-            ],
-            profile: {
-                name: key,
-            },
-            ref_info: {
-                _id: '',
-            },
-        });
+        callback(security.permissions);
+      });
+    } else if (typeof list === 'object') {
+      for (let i = 0; i < list.length; i++) {
+        security.permissions.push(list[i]);
+      }
+      callback(security.permissions);
+    }
+  };
+
+  security.addRole = function (role, callback) {
+    callback = callback || function () {};
+    ____0.$roles.add(role, (err, doc) => {
+      if (!err && doc) {
+        doc.module_name = 'custom';
+        security.addRoles([doc]);
+      }
+      callback(err, doc);
     });
-    ____0.options.security.users.forEach((user) => {
-        user.key = user.key || ____0.options.security.key;
-        security.users.push(____0.options.security.users[i]);
+  };
+
+  security.updateRole = security.editeRole = function (role, callback) {
+    callback = callback || function () {};
+    ____0.$roles.update(role, (err, result) => {
+      if (!err) {
+        security.roles.forEach((r) => {
+          if (r.id == role.id) {
+            r = role;
+          }
+        });
+      }
+      callback(err, result);
     });
-
-    security.addPermissions = function (list, callback) {
-        callback = callback || function () {};
-        if (typeof list === 'string') {
-            ____0.readFile(list, (err, data) => {
-                if (!err) {
-                    let arr = ____0.fromJson(data);
-                    for (let i = 0; i < arr.length; i++) {
-                        security.permissions.push(arr[i]);
-                    }
-                }
-                callback(security.permissions);
-            });
-        } else if (typeof list === 'object') {
-            for (let i = 0; i < list.length; i++) {
-                security.permissions.push(list[i]);
+  };
+
+  security.deleteRole = security.removeRole = function (role, callback) {
+    callback = callback || function () {};
+    ____0.$roles.delete(
+      {
+        where: {
+          id: role.id,
+        },
+      },
+      (err, result) => {
+        if (!err) {
+          security.roles.forEach((r, i) => {
+            if (r.name == role.name) {
+              security.roles.splice(i, 1);
             }
-            callback(security.permissions);
+          });
         }
-    };
-
-    security.addRole = function (role, callback) {
-        callback = callback || function () {};
-        ____0.$roles.add(role, (err, doc) => {
-            if (!err && doc) {
-                doc.module_name = 'custom';
-                security.addRoles([doc]);
-            }
-            callback(err, doc);
-        });
-    };
-
-    security.updateRole = security.editeRole = function (role, callback) {
-        callback = callback || function () {};
-        ____0.$roles.update(role, (err, result) => {
-            if (!err) {
-                security.roles.forEach((r) => {
-                    if (r.id == role.id) {
-                        r = role;
-                    }
-                });
-            }
-            callback(err, result);
-        });
-    };
-
-    security.deleteRole = security.removeRole = function (role, callback) {
-        callback = callback || function () {};
-        ____0.$roles.delete(
-            {
-                where: {
-                    id: role.id,
-                },
-            },
-            (err, result) => {
-                if (!err) {
-                    security.roles.forEach((r, i) => {
-                        if (r.name == role.name) {
-                            security.roles.splice(i, 1);
-                        }
-                    });
-                }
-                callback(err, result);
-            },
-        );
-    };
-
-    security.addRoles = function (list, callback) {
-        callback = callback || function () {};
-        if (typeof list === 'string') {
-            ____0.readFile(list, (err, data) => {
-                if (!err) {
-                    let arr = ____0.fromJson(data);
-                    for (let i = 0; i < arr.length; i++) {
-                        security.roles.push(arr[i]);
-                    }
-                }
-                callback(security.roles);
-            });
-        } else if (typeof list === 'object') {
-            for (let i = 0; i < list.length; i++) {
-                security.roles.push(list[i]);
-            }
-            callback(security.roles);
+        callback(err, result);
+      }
+    );
+  };
+
+  security.addRoles = function (list, callback) {
+    callback = callback || function () {};
+    if (typeof list === 'string') {
+      ____0.readFile(list, (err, data) => {
+        if (!err) {
+          let arr = ____0.fromJson(data);
+          for (let i = 0; i < arr.length; i++) {
+            security.roles.push(arr[i]);
+          }
         }
-    };
+        callback(security.roles);
+      });
+    } else if (typeof list === 'object') {
+      for (let i = 0; i < list.length; i++) {
+        security.roles.push(list[i]);
+      }
+      callback(security.roles);
+    }
+  };
+
+  security.busy = !1;
 
-    security.busy = !1;
+  security.removeUserFinger = function (obj) {
+    delete obj.$req;
+    delete obj.$res;
 
-    security.removeUserFinger = function (obj) {
-        delete obj.$req;
-        delete obj.$res;
+    return obj;
+  };
+  security.getUserFinger = function (obj) {
+    let req = obj.$req;
+    let res = obj.$res;
 
-        return obj;
+    let userFinger = {
+      id: null,
+      email: null,
+      date: new Date(),
+      ip: null,
     };
-    security.getUserFinger = function (obj) {
-        let req = obj.$req;
-        let res = obj.$res;
-
-        let userFinger = {
-            id: null,
-            email: null,
-            date: new Date(),
-            ip: null,
-        };
 
-        if (req && req.session && req.session.user) {
-            req.session.user.profile = req.session.user.profile || {};
-            userFinger.id = req.session.user.id;
-            userFinger.email = req.session.user.email;
-            userFinger.name = req.session.user.profile.name || userFinger.email;
-            userFinger.name_ar = req.session.user.profile.name_ar || userFinger.email;
-            userFinger.name_en = req.session.user.profile.name_en || userFinger.email;
-            userFinger.ip = req.ip;
-        } else {
-        }
+    if (req && req.session && req.session.user) {
+      req.session.user.profile = req.session.user.profile || {};
+      userFinger.id = req.session.user.id;
+      userFinger.email = req.session.user.email;
+      userFinger.name = req.session.user.profile.name || userFinger.email;
+      userFinger.name_ar = req.session.user.profile.name_ar || userFinger.email;
+      userFinger.name_en = req.session.user.profile.name_en || userFinger.email;
+      userFinger.ip = req.ip;
+    } else {
+    }
 
-        return userFinger;
-    };
+    return userFinger;
+  };
 
-    security.handleUser = function (_user) {
-        _user.roles = _user.roles || [];
-        _user.permissions = _user.permissions || [];
-        _user.$permissions = [];
-        _user.$permissions_info = [];
+  security.handleUser = function (_user) {
+    _user.roles = _user.roles || [];
+    _user.permissions = _user.permissions || [];
+    _user.$permissions = [];
+    _user.$permissions_info = [];
 
-        _user.permissions.forEach((p) => {
-            if (p.name && _user.$permissions.filter((_p) => _p == p.name).length === 0) _user.$permissions.push(p.name);
-        });
+    _user.permissions.forEach((p) => {
+      if (p.name && _user.$permissions.filter((_p) => _p == p.name).length === 0) _user.$permissions.push(p.name);
+    });
 
-        _user.roles.forEach((role) => {
-            if (role === '*') {
-                _user.$permissions.push('*');
+    if (_user.role) {
+      security.roles
+        .filter((r) => r.name == _user.role.name)
+        .map((r) => r.permissions)
+        .forEach((ps) => {
+          ps.forEach((p) => {
+            if (_user.$permissions.filter((_p) => _p == p).length === 0) {
+              _user.$permissions.push(p);
             }
-            delete role.permissions;
-
-            security.roles
-                .filter((r) => r.name == role.name)
-                .map((r) => r.permissions)
-                .forEach((ps) => {
-                    ps.forEach((p) => {
-                        if (_user.$permissions.filter((_p) => _p == p).length === 0) _user.$permissions.push(p);
-                        security.permissions.forEach((p2) => {
-                            if (p2.name == '*') {
-                            }
-                            if (p2.name == p) {
-                                _user.$permissions_info.push(p2);
-                            }
-                        });
-                    });
-                });
+            security.permissions.forEach((p2) => {
+              if (p2.name == '*') {
+              }
+              if (p2.name == p) {
+                _user.$permissions_info.push(p2);
+              }
+            });
+          });
         });
+    }
 
-        return _user;
-    };
-
-    security.loadAllUsers = function (callback) {
-        callback = callback || function () {};
-        ____0.$users.findMany(
-            {
-                limit: 10000,
-                select: {},
-            },
-            function (err, docs) {
-                if (!docs) {
-                    docs = [];
-                }
-                callback(err, docs);
-            },
-        );
-    };
-
-    security.loadAllRoles = function (callback) {
-        callback = callback || function () {};
-        ____0.$roles.findMany(
-            {
-                limit: 10000,
-                select: {},
-            },
-            function (err, docs) {
-                if (!docs) {
-                    docs = [];
-                }
-                callback(err, docs);
-            },
-        );
-    };
-
-    security.getUsers = function (options, callback) {
-        callback = callback || function () {};
-        ____0.$users.findMany(options, function (err, docs, count) {
-            if (!err && docs) {
-                docs.forEach((doc) => {
-                    doc = Object.assign(doc, security.handleUser(doc));
-                });
-            }
-            callback(err, docs, count);
+    _user.roles.forEach((role) => {
+      if (role === '*') {
+        _user.$permissions.push('*');
+      }
+      delete role.permissions;
+
+      security.roles
+        .filter((r) => r.name == role.name)
+        .map((r) => r.permissions)
+        .forEach((ps) => {
+          ps.forEach((p) => {
+            if (_user.$permissions.filter((_p) => _p == p).length === 0) _user.$permissions.push(p);
+            security.permissions.forEach((p2) => {
+              if (p2.name == '*') {
+              }
+              if (p2.name == p) {
+                _user.$permissions_info.push(p2);
+              }
+            });
+          });
         });
-    };
+    });
 
-    security.getUser = function (userArgs, callback) {
-        callback = callback || function () {};
-        for (let i = 0; i < security.users.length; i++) {
-            let user = security.users[i];
-
-            if (
-                (userArgs.id && user.id === userArgs.id) ||
-                (!user.key && userArgs.email && user.email === userArgs.email.trim().toLowerCase()) ||
-                (!user.key && userArgs.userName && user.userName === userArgs.userName.trim().toLowerCase()) ||
-                (!user.key && userArgs.mobile && user.mobile === userArgs.mobile.trim().toLowerCase()) ||
-                (user.key && userArgs.key && user.key === userArgs.key) ||
-                (user.key && userArgs.email && user.key === ____0.x0md50x(userArgs.email.trim().toLowerCase()))
-            ) {
-                user.$memory = !0;
-                user = security.handleUser(user);
-                callback(null, user);
-                return;
-            }
+    return _user;
+  };
+
+  security.loadAllUsers = function (callback) {
+    callback = callback || function () {};
+    ____0.$users.findMany(
+      {
+        limit: 10000,
+        select: {},
+      },
+      function (err, docs) {
+        if (!docs) {
+          docs = [];
         }
+        callback(err, docs);
+      }
+    );
+  };
+
+  security.loadAllRoles = function (callback) {
+    callback = callback || function () {};
+    ____0.$roles.findMany(
+      {
+        limit: 10000,
+        select: {},
+      },
+      function (err, docs) {
+        if (!docs) {
+          docs = [];
+        }
+        callback(err, docs);
+      }
+    );
+  };
 
-        ____0.$users.findOne(
-            {
-                where: userArgs,
-                select: {},
-            },
-            function (err, doc) {
-                if (doc && (userArgs.id || userArgs.email)) {
-                    doc = security.handleUser(doc);
-                    security.users.push(doc);
-                }
-                callback(err, doc);
-            },
-        );
-    };
+  security.getUsers = function (options, callback) {
+    callback = callback || function () {};
+    ____0.$users.findMany(options, function (err, docs, count) {
+      if (!err && docs) {
+        docs.forEach((doc) => {
+          doc = Object.assign(doc, security.handleUser(doc));
+        });
+      }
+      callback(err, docs, count);
+    });
+  };
+
+  security.getUser = function (userArgs, callback) {
+    callback = callback || function () {};
+    for (let i = 0; i < security.users.length; i++) {
+      let user = security.users[i];
+
+      if (
+        (userArgs.id && user.id === userArgs.id) ||
+        (!user.key && userArgs.email && user.email === userArgs.email.trim().toLowerCase()) ||
+        (!user.key && userArgs.userName && user.userName === userArgs.userName.trim().toLowerCase()) ||
+        (!user.key && userArgs.mobile && user.mobile === userArgs.mobile.trim().toLowerCase()) ||
+        (user.key && userArgs.key && user.key === userArgs.key) ||
+        (user.key && userArgs.email && user.key === ____0.x0md50x(userArgs.email.trim().toLowerCase()))
+      ) {
+        user.$memory = !0;
+        user = security.handleUser(user);
+        callback(null, user);
+        return;
+      }
+    }
 
-    security.isUserExists = function (user, callback) {
-        callback = callback || function () {};
-        if (typeof user !== 'object' || typeof user.email !== 'string' || user.email == '') {
-            callback({
-                message: 'email not set',
-            });
-            return;
+    ____0.$users.findOne(
+      {
+        where: userArgs,
+        select: {},
+      },
+      function (err, doc) {
+        if (doc && (userArgs.id || userArgs.email)) {
+          doc = security.handleUser(doc);
+          security.users.push(doc);
         }
+        callback(err, doc);
+      }
+    );
+  };
+
+  security.isUserExists = function (user, callback) {
+    callback = callback || function () {};
+    if (typeof user !== 'object' || typeof user.email !== 'string' || user.email == '') {
+      callback({
+        message: 'email not set',
+      });
+      return;
+    }
 
-        for (var i = 0; i < security.users.length; i++) {
-            var _user = security.users[i];
-            if (_user.email == user.email.trim().toLowerCase() && _user.password == user.password) {
-                callback(null, { ..._user });
-                return;
-            }
-        }
+    for (var i = 0; i < security.users.length; i++) {
+      var _user = security.users[i];
+      if (_user.email == user.email.trim().toLowerCase() && _user.password == user.password) {
+        callback(null, { ..._user });
+        return;
+      }
+    }
 
-        ____0.$users.findOne(
+    ____0.$users.findOne(
+      {
+        where: {
+          email: user.email.toLowerCase(),
+        },
+      },
+      function (err, doc) {
+        if (doc) {
+          doc = security.handleUser(doc);
+          callback(err, doc);
+          security.users.push(doc);
+        } else {
+          callback(
             {
-                where: {
-                    email: user.email.toLowerCase(),
-                },
+              message: 'User Not Exists',
             },
-            function (err, doc) {
-                if (doc) {
-                    doc = security.handleUser(doc);
-                    callback(err, doc);
-                    security.users.push(doc);
-                } else {
-                    callback(
-                        {
-                            message: 'User Not Exists',
-                        },
-                        null,
-                    );
-                }
-            },
-        );
-    };
+            null
+          );
+        }
+      }
+    );
+  };
+
+  security.login = function (user, callback) {
+    callback = callback || function () {};
+    let $req = user.$req;
+    let $res = user.$res;
+
+    delete user.$req;
+    delete user.$res;
+
+    if (user && user.email && user.password) {
+      user.email = user.email.trim().toLowerCase();
+    } else if (user && user.mobile && user.password) {
+      user.mobile = user.mobile.trim().toLowerCase();
+    } else if (user && user.userName && user.password) {
+      user.userName = user.userName.trim().toLowerCase();
+    } else {
+      callback({
+        message: 'User Info Not Correct',
+      });
+      return;
+    }
 
-    security.login = function (user, callback) {
-        callback = callback || function () {};
-        let $req = user.$req;
-        let $res = user.$res;
+    for (var i = 0; i < security.users.length; i++) {
+      var _user = security.users[i];
+      if (
+        (!_user.key && user.email && _user.email === user.email && _user.password === user.password) ||
+        (!_user.key && user.mobile && _user.mobile === user.mobile && _user.password === user.password) ||
+        (!_user.key && user.userName && _user.userName === user.userName && _user.password === user.password) ||
+        (_user.key && user.key && _user.key === user.key) ||
+        (_user.key && user.email && user.password && _user.key === ____0.x0md50x(user.email + user.password))
+      ) {
+        if ($req) {
+          $req.session.user = _user;
+          $req.session.user_id = _user.id;
+          ____0.saveSession($req.session);
+        }
+        callback(null, _user);
+        ____0.call('user login', {
+          db: ____0.$users.db,
+          collection: ____0.$users.collection,
+          doc: _user,
+          $res: $res,
+          $req: $req,
+        });
 
-        delete user.$req;
-        delete user.$res;
+        return;
+      }
+    }
 
-        if (user && user.email && user.password) {
-            user.email = user.email.trim().toLowerCase();
-        } else if (user && user.mobile && user.password) {
-            user.mobile = user.mobile.trim().toLowerCase();
-        } else if (user && user.userName && user.password) {
-            user.userName = user.userName.trim().toLowerCase();
+    let where = {
+      password: user.password,
+    };
+    if (user.email) {
+      where.email = user.email;
+    } else if (user.mobile) {
+      where.mobile = user.mobile;
+    } else if (user.userName) {
+      where.userName = user.userName;
+    } else {
+      callback({
+        message: 'User Info Not Correct',
+      });
+      return;
+    }
+    ____0.$users.findOne(
+      {
+        where: where,
+      },
+      function (err, doc) {
+        if (doc) {
+          doc = security.handleUser(doc);
+
+          security.users.push(doc);
+
+          if ($req) {
+            $req.session.user = doc;
+            $req.session.user_id = doc.id;
+            ____0.saveSession($req.session);
+          }
+
+          callback(null, doc);
+
+          ____0.call('user login', {
+            db: ____0.$users.db,
+            collection: ____0.$users.collection,
+            doc: doc,
+            $res: $res,
+            $req: $req,
+          });
         } else {
+          if (err) {
+            callback(err);
+          } else {
             callback({
-                message: 'User Info Not Correct',
+              message: 'email or password error ',
             });
-            return;
-        }
+          }
 
-        for (var i = 0; i < security.users.length; i++) {
-            var _user = security.users[i];
-            if (
-                (!_user.key && user.email && _user.email === user.email && _user.password === user.password) ||
-                (!_user.key && user.mobile && _user.mobile === user.mobile && _user.password === user.password) ||
-                (!_user.key && user.userName && _user.userName === user.userName && _user.password === user.password) ||
-                (_user.key && user.key && _user.key === user.key) ||
-                (_user.key && user.email && user.password && _user.key === ____0.x0md50x(user.email + user.password))
-            ) {
-                if ($req) {
-                    $req.session.user = _user;
-                    $req.session.user_id = _user.id;
-                    ____0.saveSession($req.session);
-                }
-                callback(null, _user);
-                ____0.call('user login', {
-                    db: ____0.$users.db,
-                    collection: ____0.$users.collection,
-                    doc: _user,
-                    $res: $res,
-                    $req: $req,
-                });
-
-                return;
-            }
+          ____0.call('security error', {
+            message: 'email or password error',
+          });
         }
+      }
+    );
+  };
+
+  security.register = function (user, callback) {
+    callback = callback || function () {};
+    let $req = user.$req;
+    let $res = user.$res;
+
+    delete user.$req;
+    delete user.$res;
+
+    if (user && user.email && user.password) {
+      user.email = user.email.trim().toLowerCase();
+    } else if (user && user.mobile && user.password) {
+      user.mobile = user.mobile.trim().toLowerCase();
+    } else if (user && user.userName && user.password) {
+      user.userName = user.userName.trim().toLowerCase();
+    } else {
+      callback({
+        message: 'User Info Not Correct',
+      });
+      return;
+    }
 
-        let where = {
-            password: user.password,
+    security.isUserExists(user, function (err, u) {
+      if (u) {
+        callback({
+          message: 'Register Error , User Exists',
+        });
+      } else {
+        user.profile = user.profile || {
+          name: user.email,
         };
-        if (user.email) {
-            where.email = user.email;
-        } else if (user.mobile) {
-            where.mobile = user.mobile;
-        } else if (user.userName) {
-            where.userName = user.userName;
-        } else {
-            callback({
-                message: 'User Info Not Correct',
+        user.permissions = user.permissions || [];
+        user.roles = user.roles || [];
+
+        ____0.$users.insertOne(user, function (err, doc) {
+          if (doc) {
+            doc = security.handleUser(doc);
+
+            security.users.push(doc);
+            if ($req) {
+              $req.session.user = doc;
+              $req.session.user_id = doc.id;
+              ____0.saveSession($req.session);
+            }
+            ____0.call('user register', {
+              db: ____0.$users.db,
+              collection: ____0.$users.collection,
+              doc: doc,
+              $res: $res,
+              $req: $req,
             });
-            return;
-        }
-        ____0.$users.findOne(
-            {
-                where: where,
-            },
-            function (err, doc) {
-                if (doc) {
-                    doc = security.handleUser(doc);
-
-                    security.users.push(doc);
-
-                    if ($req) {
-                        $req.session.user = doc;
-                        $req.session.user_id = doc.id;
-                        ____0.saveSession($req.session);
-                    }
-
-                    callback(null, doc);
-
-                    ____0.call('user login', {
-                        db: ____0.$users.db,
-                        collection: ____0.$users.collection,
-                        doc: doc,
-                        $res: $res,
-                        $req: $req,
-                    });
-                } else {
-                    if (err) {
-                        callback(err);
-                    } else {
-                        callback({
-                            message: 'email or password error ',
-                        });
-                    }
-
-                    ____0.call('security error', {
-                        message: 'email or password error',
-                    });
-                }
-            },
-        );
-    };
-
-    security.register = function (user, callback) {
-        callback = callback || function () {};
-        let $req = user.$req;
-        let $res = user.$res;
+          }
+          callback(err, doc);
+          if (err) {
+            ____0.call('security error', err);
+          }
+        });
+      }
+    });
+  };
+
+  security.logout = function (req, res, callback) {
+    callback = callback || function () {};
+
+    if (security.isUserLogin(req, res)) {
+      let _user = req.session.user;
+      ____0.call('[session][delete]', {
+        accessToken: req.session.accessToken,
+      });
+
+      ____0.call('user logout', {
+        db: ____0.$users.db,
+        collection: ____0.$users.collection,
+        doc: _user,
+        $res: res,
+        $req: req,
+      });
+    }
 
-        delete user.$req;
-        delete user.$res;
+    res.cookie('access_token', ____0.x0md50x(new Date().getTime().toString() + '_' + Math.random() * (10000 - 1000) + 1000));
+    callback(null, !0);
+  };
+
+  security.addUser = function (user, callback) {
+    callback = callback || function () {};
+
+    let $req = user.$req;
+    let $res = user.$res;
+
+    delete user.$req;
+    delete user.$res;
+
+    if (user && user.email && user.password) {
+      user.email = user.email.trim().toLowerCase();
+    } else if (user && user.mobile && user.password) {
+      user.mobile = user.mobile.trim().toLowerCase();
+    } else if (user && user.userName && user.password) {
+      user.userName = user.userName.trim().toLowerCase();
+    } else {
+      callback({
+        message: 'User Info Not Correct',
+      });
+      return;
+    }
 
-        if (user && user.email && user.password) {
-            user.email = user.email.trim().toLowerCase();
-        } else if (user && user.mobile && user.password) {
-            user.mobile = user.mobile.trim().toLowerCase();
-        } else if (user && user.userName && user.password) {
-            user.userName = user.userName.trim().toLowerCase();
-        } else {
-            callback({
-                message: 'User Info Not Correct',
-            });
-            return;
-        }
+    security.isUserExists(user, function (err, u) {
+      if (u) {
+        callback({
+          message: 'Error , User Exists',
+        });
 
-        security.isUserExists(user, function (err, u) {
-            if (u) {
-                callback({
-                    message: 'Register Error , User Exists',
-                });
-            } else {
-                user.profile = user.profile || {
-                    name: user.email,
-                };
-                user.permissions = user.permissions || [];
-                user.roles = user.roles || [];
-
-                ____0.$users.insertOne(user, function (err, doc) {
-                    if (doc) {
-                        doc = security.handleUser(doc);
-
-                        security.users.push(doc);
-                        if ($req) {
-                            $req.session.user = doc;
-                            $req.session.user_id = doc.id;
-                            ____0.saveSession($req.session);
-                        }
-                        ____0.call('user register', {
-                            db: ____0.$users.db,
-                            collection: ____0.$users.collection,
-                            doc: doc,
-                            $res: $res,
-                            $req: $req,
-                        });
-                    }
-                    callback(err, doc);
-                    if (err) {
-                        ____0.call('security error', err);
-                    }
-                });
-            }
+        return;
+      } else {
+        user.profile = user.profile || {};
+        user.permissions = user.permissions || [];
+        user.roles = user.roles || [];
+        user.added_user_info = security.getUserFinger({
+          $req: $req,
+          $res: $res,
         });
-    };
 
-    security.logout = function (req, res, callback) {
-        callback = callback || function () {};
+        ____0.$users.insertOne(user, function (err, doc) {
+          if (doc) {
+            doc = Object.assign(doc, security.handleUser(doc));
 
-        if (security.isUserLogin(req, res)) {
-            let _user = req.session.user;
-            ____0.call('[session][delete]', {
-                accessToken: req.session.accessToken,
-            });
+            security.users.push(doc);
 
-            ____0.call('user logout', {
-                db: ____0.$users.db,
-                collection: ____0.$users.collection,
-                doc: _user,
-                $res: res,
-                $req: req,
+            ____0.call('user add', {
+              db: ____0.$users.db,
+              collection: ____0.$users.collection,
+              doc: doc,
+              $req: $req,
+              $res: $res,
             });
-        }
-
-        res.cookie('access_token', ____0.x0md50x(new Date().getTime().toString() + '_' + Math.random() * (10000 - 1000) + 1000));
-        callback(null, !0);
-    };
+          }
 
-    security.addUser = function (user, callback) {
-        callback = callback || function () {};
+          callback(err, doc);
 
-        let $req = user.$req;
-        let $res = user.$res;
-
-        delete user.$req;
-        delete user.$res;
+          if (err) {
+            ____0.call('security error', err);
+          }
+        });
+      }
+    });
+  };
+
+  security.updateUser = function (user, callback) {
+    callback = callback || function () {};
+    let $req = user.$req;
+    let $res = user.$res;
+
+    delete user.$req;
+    delete user.$res;
+
+    let where = {};
+    if (user.id) {
+      where.id = user.id;
+    } else if (user.email) {
+      where.email = user.email.trim().toLowerCase();
+    } else if (user.mobile) {
+      where.mobile = user.mobile.trim().toLowerCase();
+    } else if (user.userName) {
+      where.userName = user.userName.trim().toLowerCase();
+    } else {
+      callback({
+        message: 'User Info Not Correct',
+      });
+      return;
+    }
 
-        if (user && user.email && user.password) {
-            user.email = user.email.trim().toLowerCase();
-        } else if (user && user.mobile && user.password) {
-            user.mobile = user.mobile.trim().toLowerCase();
-        } else if (user && user.userName && user.password) {
-            user.userName = user.userName.trim().toLowerCase();
+    ____0.$users.update(
+      {
+        where: where,
+        set: user,
+        $req: $req,
+        $res: $res,
+      },
+      function (err, result) {
+        callback(err, result);
+        if (result.doc) {
+          for (let i = 0; i < security.users.length; i++) {
+            let element = security.users[i];
+            if (element.id == result.doc.id) {
+              element = Object.assign(element, security.handleUser(result.doc));
+              security.users[i] = element;
+            }
+          }
+          ____0.call('user update', result);
+          ____0.call('[session][user][update]', result.doc);
+        }
+      }
+    );
+  };
+  security.deleteUser = function (user, callback) {
+    callback = callback || function () {};
+    ____0.$users.deleteOne(
+      {
+        id: user.id,
+      },
+      function (err, result) {
+        if (err) {
+          callback(err, result);
         } else {
-            callback({
-                message: 'User Info Not Correct',
-            });
-            return;
+          for (let i = 0; i < security.users.length; i++) {
+            let element = security.users[i];
+            if (element.id == user.id) {
+              security.users.splice(i, 1);
+              break;
+            }
+          }
+          callback(err, result);
+          if (!err && result) {
+            ____0.call('user delete', result);
+          }
         }
+      }
+    );
+  };
 
-        security.isUserExists(user, function (err, u) {
-            if (u) {
-                callback({
-                    message: 'Error , User Exists',
-                });
-
-                return;
-            } else {
-                user.profile = user.profile || {};
-                user.permissions = user.permissions || [];
-                user.roles = user.roles || [];
-                user.added_user_info = security.getUserFinger({
-                    $req: $req,
-                    $res: $res,
-                });
-
-                ____0.$users.insertOne(user, function (err, doc) {
-                    if (doc) {
-                        doc = Object.assign(doc, security.handleUser(doc));
-
-                        security.users.push(doc);
-
-                        ____0.call('user add', {
-                            db: ____0.$users.db,
-                            collection: ____0.$users.collection,
-                            doc: doc,
-                            $req: $req,
-                            $res: $res,
-                        });
-                    }
-
-                    callback(err, doc);
-
-                    if (err) {
-                        ____0.call('security error', err);
-                    }
-                });
-            }
-        });
-    };
+  security.isUserLogin = function (req, res) {
+    if (req.session.user) {
+      return !0;
+    }
+    return !1;
+  };
 
-    security.updateUser = function (user, callback) {
-        callback = callback || function () {};
-        let $req = user.$req;
-        let $res = user.$res;
-
-        delete user.$req;
-        delete user.$res;
-
-        let where = {};
-        if (user.id) {
-            where.id = user.id;
-        } else if (user.email) {
-            where.email = user.email.trim().toLowerCase();
-        } else if (user.mobile) {
-            where.mobile = user.mobile.trim().toLowerCase();
-        } else if (user.userName) {
-            where.userName = user.userName.trim().toLowerCase();
-        } else {
-            callback({
-                message: 'User Info Not Correct',
-            });
-            return;
-        }
+  security.isUserHasPermission = function (req, res, permission) {
+    let user = req.session.user;
 
-        ____0.$users.update(
-            {
-                where: where,
-                set: user,
-                $req: $req,
-                $res: $res,
-            },
-            function (err, result) {
-                callback(err, result);
-                if (result.doc) {
-                    for (let i = 0; i < security.users.length; i++) {
-                        let element = security.users[i];
-                        if (element.id == result.doc.id) {
-                            element = Object.assign(element, security.handleUser(result.doc));
-                            security.users[i] = element;
-                        }
-                    }
-                    ____0.call('user update', result);
-                    ____0.call('[session][user][update]', result.doc);
-                }
-            },
-        );
-    };
-    security.deleteUser = function (user, callback) {
-        callback = callback || function () {};
-        ____0.$users.deleteOne(
-            {
-                id: user.id,
-            },
-            function (err, result) {
-                if (err) {
-                    callback(err, result);
-                } else {
-                    for (let i = 0; i < security.users.length; i++) {
-                        let element = security.users[i];
-                        if (element.id == user.id) {
-                            security.users.splice(i, 1);
-                            break;
-                        }
-                    }
-                    callback(err, result);
-                    if (!err && result) {
-                        ____0.call('user delete', result);
-                    }
-                }
-            },
-        );
-    };
+    if (typeof permission == 'string') {
+      let ok = !0;
 
-    security.isUserLogin = function (req, res) {
-        if (req.session.user) {
-            return !0;
-        }
-        return !1;
-    };
+      if (permission == '*') {
+        return ok;
+      }
 
-    security.isUserHasPermission = function (req, res, permission) {
-        let user = req.session.user;
+      if (permission.startsWith('!')) {
+        permission = permission.substring(1);
+        ok = !1;
+      }
 
-        if (typeof permission == 'string') {
-            let ok = !0;
+      if (permission == 'login') {
+        if (security.isUserLogin(req, res)) {
+          return ok;
+        } else {
+          return !ok;
+        }
+      }
+
+      if (user && user.$permissions) {
+        for (var i = 0; i < user.$permissions.length; i++) {
+          var p = user.$permissions[i];
+          if (permission == p) {
+            return ok;
+          }
+          if (p == '*') {
+            return ok;
+          }
+        }
+      }
 
-            if (permission == '*') {
-                return ok;
-            }
+      return !ok;
+    }
 
-            if (permission.startsWith('!')) {
-                permission = permission.substring(1);
-                ok = !1;
-            }
+    return !1;
+  };
 
-            if (permission == 'login') {
-                if (security.isUserLogin(req, res)) {
-                    return ok;
-                } else {
-                    return !ok;
-                }
-            }
+  security.isUserHasPermissions = function (req, res, permissions) {
+    let user = req.session.user;
+    let arr = [];
+    let any = !0;
 
-            if (user && user.$permissions) {
-                for (var i = 0; i < user.$permissions.length; i++) {
-                    var p = user.$permissions[i];
-                    if (permission == p) {
-                        return ok;
-                    }
-                    if (p == '*') {
-                        return ok;
-                    }
-                }
-            }
+    if (typeof permissions === 'string') {
+      if (permissions.like('*&&*')) {
+        any = !1;
+      }
+      permissions = permissions.split('&&').join(',').split('||').join(',').split(',');
+    }
 
-            return !ok;
-        }
+    permissions.forEach((p) => {
+      if (p) {
+        arr.push(security.isUserHasPermission(req, res, p.trim()));
+      }
+    });
 
-        return !1;
-    };
+    let out = !1;
 
-    security.isUserHasPermissions = function (req, res, permissions) {
-        let user = req.session.user;
-        let arr = [];
-        let any = !0;
+    if (any) {
+      arr.forEach((p) => {
+        if (p) {
+          out = !0;
+        }
+      });
 
-        if (typeof permissions === 'string') {
-            if (permissions.like('*&&*')) {
-                any = !1;
-            }
-            permissions = permissions.split('&&').join(',').split('||').join(',').split(',');
+      return out || !1;
+    } else {
+      arr.forEach((p) => {
+        if (!p) {
+          out = !1;
         }
+      });
+      return out && !0;
+    }
 
-        permissions.forEach((p) => {
-            if (p) {
-                arr.push(security.isUserHasPermission(req, res, p.trim()));
-            }
-        });
+    return !1;
+  };
 
-        let out = !1;
+  security.isUserHasRole = function (req, res, role) {
+    let user = req.session.user;
 
-        if (any) {
-            arr.forEach((p) => {
-                if (p) {
-                    out = !0;
-                }
-            });
+    if (typeof role == 'string') {
+      let ok = !0;
+      if (role.startsWith('!')) {
+        role = role.substring(1);
+        ok = !1;
+      }
 
-            return out || !1;
-        } else {
-            arr.forEach((p) => {
-                if (!p) {
-                    out = !1;
-                }
-            });
-            return out && !0;
+      if (user && user.role) {
+        if (role == user.role.name) {
+          return ok;
         }
+        if (user.role == '*') {
+          return ok;
+        }
+      }
+      if (user && user.roles) {
+        for (var i = 0; i < user.roles.length; i++) {
+          var p = user.roles[i];
+          if (role == p.name) {
+            return ok;
+          }
+          if (p == '*') {
+            return ok;
+          }
+        }
+      }
+      return !ok;
+    }
 
-        return !1;
-    };
-
-    security.isUserHasRole = function (req, res, role) {
-        let user = req.session.user;
+    return !1;
+  };
 
-        if (typeof role == 'string') {
-            let ok = !0;
-            if (role.startsWith('!')) {
-                role = role.substring(1);
-                ok = !1;
-            }
+  security.isUserHasRoles = function (req, res, roles) {
+    let user = req.session.user;
+    let arr = [];
+    let any = !0;
 
-            if (user && user.roles) {
-                for (var i = 0; i < user.roles.length; i++) {
-                    var p = user.roles[i];
-                    if (role == p.name) {
-                        return ok;
-                    }
-                    if (p == '*') {
-                        return ok;
-                    }
-                }
-            }
-            return !ok;
-        }
+    if (typeof roles === 'string') {
+      if (roles.like('*&&*')) {
+        any = !1;
+      }
+      roles = roles.split('&&').join(',').split('||').join(',').split(',');
+    }
 
-        return !1;
-    };
+    roles.forEach((p) => {
+      arr.push(security.isUserHasRole(req, res, p.trim()));
+    });
 
-    security.isUserHasRoles = function (req, res, roles) {
-        let user = req.session.user;
-        let arr = [];
-        let any = !0;
+    let out = !1;
 
-        if (typeof roles === 'string') {
-            if (roles.like('*&&*')) {
-                any = !1;
-            }
-            roles = roles.split('&&').join(',').split('||').join(',').split(',');
+    if (any) {
+      arr.forEach((p) => {
+        if (p) {
+          out = !0;
+        }
+      });
+      return out || !1;
+    } else {
+      arr.forEach((p) => {
+        if (!p) {
+          out = !1;
         }
+      });
+      return out && !0;
+    }
 
-        roles.forEach((p) => {
-            arr.push(security.isUserHasRole(req, res, p.trim()));
-        });
+    return !1;
+  };
 
-        let out = !1;
+  security.getUserPermissions = function (req, res) {
+    let user = req.session.user;
+    if (user && user.permissions) {
+      return user.permissions;
+    }
+    return [];
+  };
 
-        if (any) {
-            arr.forEach((p) => {
-                if (p) {
-                    out = !0;
-                }
-            });
-            return out || !1;
+  security.getUserRoles = function (req, res) {
+    let user = req.session.user;
+    if (user && user.roles) {
+      return user.roles;
+    }
+    return [];
+  };
+
+  security.addUserPermission = function (id, permission, callback) {
+    callback = callback || function () {};
+    let user = security.getUser(
+      {
+        id: id,
+      },
+      function (err, user) {
+        if (user) {
+          if (typeof permission == 'string') {
+            permission = {
+              name: permission,
+            };
+          }
+          user.permissions.push(permission);
+          ____0.$users.updateOne(
+            {
+              where: {
+                id: id,
+              },
+              set: {
+                permissions: user.permissions,
+              },
+            },
+            function (err, result) {
+              if (err) {
+                callback(err, result);
+              } else {
+                callback(err, result);
+              }
+            }
+          );
         } else {
-            arr.forEach((p) => {
-                if (!p) {
-                    out = !1;
-                }
-            });
-            return out && !0;
+          callback(err, null);
         }
+      }
+    );
+  };
 
-        return !1;
+  ____0.post('/x-security/api/user/login', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
     };
 
-    security.getUserPermissions = function (req, res) {
-        let user = req.session.user;
-        if (user && user.permissions) {
-            return user.permissions;
-        }
-        return [];
-    };
+    if (req.body.$encript) {
+      if (req.body.$encript === '64') {
+        req.body.email = ____0.fromBase64(req.body.email);
+        req.body.password = ____0.fromBase64(req.body.password);
+      } else if (req.body.$encript === '123') {
+        req.body.email = ____0.from123(req.body.email);
+        req.body.password = ____0.from123(req.body.password);
+      }
+    }
 
-    security.getUserRoles = function (req, res) {
-        let user = req.session.user;
-        if (user && user.roles) {
-            return user.roles;
+    if (security.isUserLogin(req, res)) {
+      response.error = 'Login Error , You Are Loged ';
+      response.done = !0;
+      res.json(response);
+      return;
+    }
+
+    security.login(
+      {
+        ...req.body,
+        $req: req,
+        $res: res,
+      },
+      function (err, user) {
+        if (!err) {
+          response.user = user;
+          response.done = !0;
+        } else {
+          response.error = err.message;
         }
-        return [];
-    };
 
-    security.addUserPermission = function (id, permission, callback) {
-        callback = callback || function () {};
-        let user = security.getUser(
-            {
-                id: id,
-            },
-            function (err, user) {
-                if (user) {
-                    if (typeof permission == 'string') {
-                        permission = {
-                            name: permission,
-                        };
-                    }
-                    user.permissions.push(permission);
-                    ____0.$users.updateOne(
-                        {
-                            where: {
-                                id: id,
-                            },
-                            set: {
-                                permissions: user.permissions,
-                            },
-                        },
-                        function (err, result) {
-                            if (err) {
-                                callback(err, result);
-                            } else {
-                                callback(err, result);
-                            }
-                        },
-                    );
-                } else {
-                    callback(err, null);
-                }
-            },
-        );
+        res.json(response);
+      }
+    );
+  });
+
+  ____0.post('/x-security/api/user/logout', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
     };
 
-    ____0.post('/x-security/api/user/login', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
+    ____0.security.logout(req, res, () => {
+      response.done = !0;
+      res.json(response);
+    });
+  });
 
-        if (req.body.$encript) {
-            if (req.body.$encript === '64') {
-                req.body.email = ____0.fromBase64(req.body.email);
-                req.body.password = ____0.fromBase64(req.body.password);
-            } else if (req.body.$encript === '123') {
-                req.body.email = ____0.from123(req.body.email);
-                req.body.password = ____0.from123(req.body.password);
-            }
-        }
+  ____0.post('/x-security/api/user/register', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
+    };
+    if (req.body.$encript) {
+      if (req.body.$encript === '64') {
+        req.body.email = ____0.fromBase64(req.body.email);
+        req.body.password = ____0.fromBase64(req.body.password);
+      } else if (req.body.$encript === '123') {
+        req.body.email = ____0.from123(req.body.email);
+        req.body.password = ____0.from123(req.body.password);
+      }
+    }
 
-        if (security.isUserLogin(req, res)) {
-            response.error = 'Login Error , You Are Loged ';
+    if (security.isUserLogin(req, res)) {
+      response.error = 'Register Error , You Are Loged ';
+      res.json(response);
+    } else {
+      security.register(
+        {
+          permissions: [],
+          ...req.body,
+          ip: req.ip,
+          $req: req,
+          $res: res,
+        },
+        function (err, user) {
+          if (!err) {
+            response.user = user;
             response.done = !0;
-            res.json(response);
-            return;
+          } else {
+            response.error = err.message;
+          }
+          res.json(response);
         }
+      );
+    }
+  });
 
-        security.login(
-            {
-                ...req.body,
-                $req: req,
-                $res: res,
-            },
-            function (err, user) {
-                if (!err) {
-                    response.user = user;
-                    response.done = !0;
-                } else {
-                    response.error = err.message;
-                }
-
-                res.json(response);
-            },
-        );
-    });
-
-    ____0.post('/x-security/api/user/logout', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
-
-        ____0.security.logout(req, res, () => {
+  ____0.post('/x-security/api/user/add', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
+    };
+    if (!security.isUserLogin(req, res)) {
+      response.error = 'Error , You Are Not Loged ';
+      res.json(response);
+    } else {
+      security.addUser(
+        {
+          permissions: [],
+          ...req.body,
+          ip: req.ip,
+          $req: req,
+          $res: res,
+        },
+        function (err, user) {
+          if (!err) {
+            response.user = user;
             response.done = !0;
-            res.json(response);
-        });
-    });
-
-    ____0.post('/x-security/api/user/register', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
-        if (req.body.$encript) {
-            if (req.body.$encript === '64') {
-                req.body.email = ____0.fromBase64(req.body.email);
-                req.body.password = ____0.fromBase64(req.body.password);
-            } else if (req.body.$encript === '123') {
-                req.body.email = ____0.from123(req.body.email);
-                req.body.password = ____0.from123(req.body.password);
-            }
+          } else {
+            response.error = err.message;
+          }
+          res.json(response);
         }
+      );
+    }
+  });
 
-        if (security.isUserLogin(req, res)) {
-            response.error = 'Register Error , You Are Loged ';
-            res.json(response);
-        } else {
-            security.register(
-                {
-                    permissions: [],
-                    ...req.body,
-                    ip: req.ip,
-                    $req: req,
-                    $res: res,
-                },
-                function (err, user) {
-                    if (!err) {
-                        response.user = user;
-                        response.done = !0;
-                    } else {
-                        response.error = err.message;
-                    }
-                    res.json(response);
-                },
-            );
-        }
+  ____0.post('/x-security/api/user/get', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
+    };
+    security.getUser(req.body.id, function (err, user) {
+      if (err) {
+        response.error = err.message;
+      } else {
+        response.user = user;
+      }
+      res.json(response);
     });
+  });
 
-    ____0.post('/x-security/api/user/add', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
-        if (!security.isUserLogin(req, res)) {
-            response.error = 'Error , You Are Not Loged ';
-            res.json(response);
+  ____0.post('/x-security/api/user/delete', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
+    };
+    security.deleteUser(
+      {
+        id: req.body.id,
+      },
+      function (err, result) {
+        if (err) {
+          response.error = err.message;
         } else {
-            security.addUser(
-                {
-                    permissions: [],
-                    ...req.body,
-                    ip: req.ip,
-                    $req: req,
-                    $res: res,
-                },
-                function (err, user) {
-                    if (!err) {
-                        response.user = user;
-                        response.done = !0;
-                    } else {
-                        response.error = err.message;
-                    }
-                    res.json(response);
-                },
-            );
+          if (result.count == 1) {
+            response.done = !0;
+          }
         }
-    });
-
-    ____0.post('/x-security/api/user/get', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
-        security.getUser(req.body.id, function (err, user) {
-            if (err) {
-                response.error = err.message;
-            } else {
-                response.user = user;
-            }
-            res.json(response);
-        });
-    });
-
-    ____0.post('/x-security/api/user/delete', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
-        security.deleteUser(
-            {
-                id: req.body.id,
-            },
-            function (err, result) {
-                if (err) {
-                    response.error = err.message;
-                } else {
-                    if (result.count == 1) {
-                        response.done = !0;
-                    }
-                }
-                res.json(response);
-            },
-        );
-    });
+        res.json(response);
+      }
+    );
+  });
 
-    ____0.post('/x-security/api/user/update', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
-        let user = {};
-        user.id = req.body.id;
-        if (req.body.email) {
-            user.email = req.body.email;
+  ____0.post('/x-security/api/user/update', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
+    };
+    let user = {};
+    user.id = req.body.id;
+    if (req.body.email) {
+      user.email = req.body.email;
+    }
+    user.$req = req;
+    user.$res = res;
+    security.updateUser(user, function (err, result) {
+      if (err) {
+        response.error = err.message;
+      } else {
+        if (result.count == 1) {
+          response.done = !0;
         }
-        user.$req = req;
-        user.$res = res;
-        security.updateUser(user, function (err, result) {
-            if (err) {
-                response.error = err.message;
-            } else {
-                if (result.count == 1) {
-                    response.done = !0;
-                }
-            }
-            res.json(response);
-        });
+      }
+      res.json(response);
     });
+  });
 
-    ____0.post('/x-security/api/user/add/permission', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
+  ____0.post('/x-security/api/user/add/permission', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
+    };
 
-        if (req.body.id && req.body.permission) {
-            let user = {};
-            user.id = req.body.id;
-            user.permission = req.body.permission;
-            security.addUserPermission(user.id, user.permission, function (err, result) {
-                if (err) {
-                    response.error = err.message;
-                } else {
-                    if (result.count == 1) {
-                        response.done = !0;
-                    }
-                }
-
-                res.json(response);
-            });
+    if (req.body.id && req.body.permission) {
+      let user = {};
+      user.id = req.body.id;
+      user.permission = req.body.permission;
+      security.addUserPermission(user.id, user.permission, function (err, result) {
+        if (err) {
+          response.error = err.message;
         } else {
-            response.error = 'id or permission not set';
-            res.json(response);
+          if (result.count == 1) {
+            response.done = !0;
+          }
         }
-    });
 
-    ____0.all('/x-security/api/user/info', function (req, res) {
-        let response = {
-            accessToken: req.session.accessToken,
-        };
-        response.user = req.session.user;
         res.json(response);
-    });
-
-    ____0.all('/x-security/api/users/info', function (req, res) {
-        res.json(security.users);
-    });
-
-    if (____0.isFileExistsSync(____0.dir + '/json/permissions.json')) {
-        security.addPermissions(____0.dir + '/json/permissions.json');
-    }
-    if (____0.isFileExistsSync(____0.dir + '/json/roles.json')) {
-        security.addRoles(____0.dir + '/json/roles.json');
+      });
+    } else {
+      response.error = 'id or permission not set';
+      res.json(response);
     }
+  });
 
-    security.loadAllRoles((err, docs) => {
-        docs.forEach((doc) => {
-            doc.module_name = 'custom';
-        });
-        security.addRoles(docs);
+  ____0.all('/x-security/api/user/info', function (req, res) {
+    let response = {
+      accessToken: req.session.accessToken,
+    };
+    response.user = req.session.user;
+    res.json(response);
+  });
+
+  ____0.all('/x-security/api/users/info', function (req, res) {
+    res.json(security.users);
+  });
+
+  if (____0.isFileExistsSync(____0.dir + '/json/permissions.json')) {
+    security.addPermissions(____0.dir + '/json/permissions.json');
+  }
+  if (____0.isFileExistsSync(____0.dir + '/json/roles.json')) {
+    security.addRoles(____0.dir + '/json/roles.json');
+  }
+
+  security.loadAllRoles((err, docs) => {
+    docs.forEach((doc) => {
+      doc.module_name = 'custom';
     });
+    security.addRoles(docs);
+  });
 
-    return security;
+  return security;
 };